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Top Stories 

• FedEx Corp., was indicted July 17 for allegedly conspiring with two online pharmacies to 
ship prescription medications to customers who lacked valid prescriptions. - Associated 
Press (See item 7 ) 

• Fifteen cars and 9 semi-trucks collided leaving 13 people injured on Interstate 90 near 
Vantage, Washington, July 17, closing westbound lanes for around 2 hours while 
eastbound lanes remained closed until July 18. - KIRO 7 Seattle (See item 9 ) 

• A July 17 fire at the Swanson Group Manufacturing Springfield Plywood and Veneer 
facility in Oregon prompted the evacuation of employees and damaged or destroyed all of 
the buildings in the complex. - Eugene Register-Guard (See item 10 ) 

• Fire crews worked to contain over 17 large fires in Oregon and Washington July 17 that 
have burned through tens of thousands of acres combined, prompted evacuations, burned 
or destroyed buildings, and forced the closure of various campgrounds and highways. - 
Portland Oregonian (See item 16 ) 
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Energy Sector 



1. July 17, WFMY 2 Greensboro - (Virginia) Coal ash remains but Duke Energy 
“completes” cleanup. The U.S. Environmental Protection Agency along with Duke 
Energy officials reported July 17 that cleanup of the 39,000 tons of coal ash that spilled 
into the Dan River in February was complete after the company reportedly dredged an 
estimated 5,500 tons of coal ash from the river. The agency will continue quarterly 
testing and monitoring along the Dan River for several months. 

Source: http://www.wfmvnews2.corn/storv/news/local/top-news/2014/07/17/coal-ash- 
remains-but-duke-energy-completes-cleanup/12805655/ 

2. July 17, Sioux City Journal - (Iowa) No one injured in Arthur, Iowa, ethanol plant 
explosion. A Flint Hills Resources ethanol plant in Arthur, Iowa, was closed until 
further notice after an explosion in a grain dryer July 17 prompted authorities to 
evacuate and shut down the plant while they investigate the extent of damage and make 
repairs. 

Source: http://siouxcitvioumal.com/news/local/no-one-iniured-in-arthur-iowa-ethanol- 
plant-explosion/article 6ae5f5e3-5115-5ff6-8b3c-60d6453cfe80.html 

T Return to top i 

Chemical Industry Sector 

3. July 16, New Philadelphia Times-Reporter - (Ohio) Spill at Dover Chemical Corp. 
plant. A burst disc ruptured on a tank and caused a chlorinated wax material that 
contains carbon tetrachloride to spill from the reactor into a safety concrete 
containment tank, as well as an adjacent in-plant roadway July 16 at the Dover 
Chemical Corp. facility in Ohio. The spill triggered an automated shutdown of the 
facility’s systems, and crews worked to contain the spill which was later determined to 
pose no risk to the public. 

Source: 

http : //w w w .timesreporter .com/article/20 1 407 1 6/NEW S / 1 407 19487/1 994/NEW S 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. July 17, U.S. Department of Labor - (Ohio) US Department of Labor’s OSHA cites 
Piqua Champion Foundry for repeat, serious violations. The Occupational Safety 
and Health Administration cited Piqua Champion Foundry Inc., July 17 for 7 repeat and 
13 serious safety violations at its Piqua facility for exposing workers to silica and other 
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hazards. Proposed fines totaled $57,140. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26382 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. July 18, Lake Havasu City News-Herald - (Arizona; California) Havasu bank robber 
could be ‘Bombshell Bandit.’ Police stated that the person who robbed a Wells Fargo 
bank branch in Lake Havasu City, Arizona, July 8 may be the suspect known as the 
“Bombshell Bandit” who robbed two banks in California by stating that she had a 
bomb. The previous robberies in California occurred in Valencia and Point Loma. 
Source: http://www.havasunews.com/news/havasu-bank-robber-could-be-bombshell- 
bandit/article 648662aa-( )e37- 1 1 e4-92dd-( X ) 1 a4bcf887a.html 

6. July 17, Softpedia - (International) Neverquest banking trojan expands list of 
targets. Researchers with Symantec found that the attackers operating the Neverquest 
banking trojan, also known as Snifula, have focused their efforts on banks in the U.S. 
and Japan since December 2013. The trojan is able to obtain banking login information 
from victims and can also steal digital certificates, among other capabilities. 

Source: http://news.softpedia.com/news/Neverquest-Banking-Troian-Expands-List-of- 
Targets-451157.shtml 

For additional stories, see items 18 and 20 
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Transportation Systems Sector 

7. July 17, Associated Press - (National) FedEx charged with assisting illegal 
pharmacies. The U.S. Department of Justice announced an indictment July 17 against 
shipping company FedEx Corp., for allegedly conspiring with two online pharmacies to 
ship prescription medications to customers who lacked valid prescriptions between 
2000 and 2010. FedEx disputed the charges and stated that it planned to plead not 
guilty. 

Source: http://news.msn.com/us/fedex-charged-with-assisting-illegal-pharmacies 

8. July 17, Columbus Dispatch - (Ohio) Postal carrier indicted for keeping mail from 
residents in 43202 ZIP code. A Clinton Township postal carrier was charged for 
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allegedly destroying and delaying 13,000 pieces of mail belonging to residents in 
Columbus following an investigation that began in 2013 after numerous customers 
along his route reported missing mail. 

Source: http://www.dispatch.com/content/stories/local/2014/07/16/carrier-indicted-for- 
keeping-mail.html 

9. July 17, KIRO 7 Seattle - (Washington) 24-vehicle crash closes EB 1-90 near 

Vantage, injures 13. Fifteen cars and 9 semi-trucks collided leaving 13 people injured 
on Interstate 90 near Vantage July 17, closing westbound lanes for around 2 hours 
while eastbound lanes remained closed until July 18. The crash remains under 
investigation and authorities suggested that a dust storm resulting from a recent brush 
fire played a part in the incident. 

Source: http://www.kirotv.com/news/news/massive-crash-closes-eastbound-i-90-near- 
vantage-i/nghWH/ 

For another story, see item 16 
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Food and Agriculture Sector 

10. July 18, Eugene Register-Guard - (Oregon) Fire destroys mill, idles 250 workers. 
Authorities issued a temporary 1-mile radius evacuation order July 17 for the area 
surrounding the Swanson Group Manufacturing Springfield Plywood and Veneer 
facility in Springfield, Oregon, due to a fire that started in one of the wood processing 
plant’s dryer units. About 250 employees were evacuated and every building on the 
complex was damaged or destroyed by the incident. 

Source: http://registerguard.com/rg/news/31883882-76/mill-fire-springfield-south- 
explosions.html.csp 

11. July 16, U.S. Food and Drug Administration - (International) Mars Food North 
America voluntarily recalls specific batch and item number representing less than 
2,000 cases -No other UNCFE BEN’S products affected-. The U.S. Food and Drug 
Administration announced July 16 that Mars Food North American issued a voluntary 
recall for about 2,000 cases of its Uncle Ben’s Ready Rice Garden Vegetables with 
Peas, Carrots & Com pouch products due to the undeclared inclusion of barley, a non- 
wheat source of gluten caused by mislabeling. The product was produced in Canada 
and the only two lots were affected. 

Source: http://www.fda.gov/Safety/Recalls/ucm405615.htm 

12. July 16, U.S. Department of Labor - (Nebraska) Midwest Farmers Cooperative cited 
by OSHA for serious violations after truck driver dies from exposure to ammonia 
vapor cloud. The Occupational Safety and Health Administration cited Midwest 
Farmers Cooperative’s grain handling facility in Tecumseh for 12 serious violations 
following the March death of a truck driver and injury of three other workers who were 
not provided protective equipment while being exposed to anhydrous ammonia vapors. 
Proposed penalties total $62,101. 
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Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26367 
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Water and Wastewater Systems Sector 

13. July 18, WWAY 3 Wilmington - (North Carolina) 7,500 gallons of wastewater 
overflows into Lake Waccamaw after sewer spills. Around 7,500 gallons of 
untreated wastewater overflowed into Lake Waccamaw due to two spills caused by 
inflow and groundwater infiltration into the town’s sewer collection system following 
heavy rainfall July 16. The first spill was happened at a manhole on Canal Cove Road 
and the second occurred at another manhole on Creek Ridge Road, resulting in an 
overflow into the lake. 

Source: http://www.wwavtv3.com/2014/07/18/7500-gallons-of-wastewater-overflows- 
into-lake-waccamaw-after-sewer-spills 

For additional stories, see items 1 and 21 
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Healthcare and Public Health Sector 

14. July 17, Associated Press - (New Mexico) Medical helicopter crashes in New 
Mexico; 3 dead. Three crew members were killed when a TriState CareFlight LLC- 
owned medical helicopter crashed into the side of a hilltop in Newkirk, New Mexico, 
July 17 on its way from a medical center in Santa Fe. Authorities are investigating the 
cause of the crash which may have been weather-related. 

Source: http://news.msn.com/us/medical-helicopter-crashes-in-new-mexico-3-dead 

15. July 17, CNN - (National) Debilitating case of mosquito-borne chikungunya 

reported in U.S. The U.S. Centers for Disease Control and Prevention reported July 17 
that a man in Florida who had not recently traveled outside the country was diagnosed 
with the first locally acquired case of chikungunya, a mosquito-derived virus, in the 
FT.S. Health officials are monitoring and working to control the virus from spreading 
throughout the country. 

Source: http://www.cnn.com/2014/07/17/health/mosquito-disease-chikungunva-u-s- 
/index.html 



For another story, see item 7 
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Government Facilities Sector 

16. July 17, Portland Oregonian - (Washington; Oregon) Fire officials track 17 large 
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wildfires in Oregon, Washington, with mandatory evacuations. Fire crews in the 
Northwest worked to contain over 17 large fires in Oregon and Washington July 17 that 
have burned through tens of thousands of acres combined, prompted evacuations, 
burned or destroyed buildings, and forced the closure of various campgrounds and 
highways. 

Source: http://www.oregonlive.com/pacific-northwest- 
news/index.ssf/2014/07/fire officials track 17 large.html 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

17. July 18, Softpedia - (International) New Android ransomware locks device 
completely. Researchers at Lookout identified a new piece of Android ransomware 
dubbed ScarePakage that infects devices by posing as a legitimate app on third-party 
Android markets and then locks the device and demands a ransom. The ransomware 
uses a Java TimerTask to kill other processes and a wave lock mechanism to prevent 
the phone from entering sleep mode. 

Source: http://news.softpedia.com/news/New-Android-Ransomware-Locks-Device- 
Completely-45 1 125.shtml 

18. July 17, Dark Reading - (International) Government- grade stealth malware in hands 
of criminals. Sentinel Labs researchers reported that a piece of malware likely 
originating from a state-sponsored espionage campaign known as Gyges is being 
repurposed by cybercriminals to conceal and protect various pieces of malware and 
ransomware. Gyges contains several sophisticated features to avoid detection and 
prevent reverse-engineering and appears to have originated in Russia. 

Source: http ://ww w . darkreading . com/go vemment- grade- stealth-malware-in-hands-of- 
criminals/d/d-id/1 297362 

19. July 17, The Register - (International) Microsoft’s Black Thursday: Xbox Live goes 
down as Xbox Studio canned. Microsoft reported that its Xbox Live gaming and 
entertainment service went offline for several hours July 17, leaving users unable to 
access the service during the outage. 

Source: http://www.theregister.co.uk/2014/07/17/xbox live problems/ 

20. July 17, Softpedia - (International) DDoS attacks decrease in Q2 2014, compared to 
Ql. Arbor Networks reported that distributed denial of service (DDoS) attacks during 
the second quarter of 2014 decreased in terms of speeds and frequency compared to the 
previous quarter, with average DDoS attack size at 759.83 Mb/s, among other findings. 
Source: http://news.softpedia.com/news/Volumetric-DDoS-Attacks-Decrease-in-Q2- 
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2014-Compared-to-Ql-451160.shtml 



For another story, see item 6 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

21. July 18, KNBC 4 Los Angeles - (California) Second water main break in Highland 
Park in 24 hours. An 8-inch water main break was found in Highland Park July 18, 
prompting Los Angeles Department of Water and Power officials to cut service to 19 
businesses and customers for over 8 hours. Officials believe the break was age-related 
and stated that it was not connected to other water main breaks in the area July 18. 
Source: http://www.nbclosangeles.com/news/local/Second-Water-Main-Break-in- 
Highland-Park-in-24-Hours-267 641031 .html 

22. July 18, WJW 8 Cleveland - (Ohio) Water main break causes flooding at Quay 55 
Apartments. Water service to the Quay 55 Apartments in Cleveland was shut off July 
17 after a 12-inch water main broke outside the property and flooded the building’s 
lobby and parking lot. Crews expected repairs to take between 6 to 8 hours and hoped 
to have water service restored by July 18. 

Source: http://fox8.com/2014/07/18/water-main-break-causes-flooding-at-quay-55- 
apartments/ 

23. July 18, KSAT 12 San Antonio - (Texas) SAFD: Lightning strikes hotel, forces 
evacuation. About 50 guests at a Holiday Inn in San Antonio were evacuated July 18 
due to a lightning strike that blew a 4-to-5-foot hole in the roof of the hotel. Several 
guests were displaced and crews covered the hole with a tarp. 

Source: http://www.ksat.com/content/pns/ksat/news/2014/07/18/lightning-strikes- 
north-side-hotel— forces-evacuation.html 

24. July 18, KKTV 11 Colorado Springs - (Colorado) Flash flooding forces evacuation of 
Boy Scout camp; 5 injured. More than 150 Boy Scouts and staff at Spanish Peaks 
Scout Ranch in Huerfano County were evacuated July 16 due to flash flooding caused 



- 7 - 



[ Return to top] 


by heavy rains, marking the second evacuation since July 8 and prompting a temporary 
closure of the camp. Five people were transported to area hospitals with injuries, 
including two children who were swept away in the current. 

Source: httn://w ww.kktv.com/homc/hcadlincs/Flash-Floodin e-Forces-Evacuation-Of- 
Bov-Scout-Camn-26747 1851 .html 



Dams Sector 

Nothing to report 
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NTAS 

NUi Terror hm Mklw»cy Sy*itm 

NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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